A Security Analyst Is Reviewing the Following Output from an IPS

question 831

Multiple Choice

A security analyst is reviewing the following output from an IPS: Given this output, which of the following can be concluded? (Choose two.)

• A) The source IP of the attack is coming from 250.19.18.22.
• B) The source IP of the attack is coming from 250.19.18.71.
• C) The attacker sent a malformed IGAP packet, triggering the alert.
• D) The attacker sent a malformed TCP packet, triggering the alert.
• E) The TTL value is outside of the expected range, triggering the alert.